Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3541454-d00c-43b8-89f6-bdce2af6959f.roa
File: e3541454-d00c-43b8-89f6-bdce2af6959f.roa (raw, json)
Hash identifier: 7T//YrDAP/bsrQwUW8FkR2TwHz5cxeCU1k0AFPYCYJM=
Subject key identifier: EF:50:A2:56:8A:DE:B6:A1:28:F9:1E:89:8A:EF:2C:67:20:56:6B:A8
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 29871D305E18F14062F74C52E177DFC677E559EA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3541454-d00c-43b8-89f6-bdce2af6959f.roa
Signing time: Tue 15 Apr 2025 15:13:27 +0000
ROA not before: Tue 15 Apr 2025 15:13:27 +0000
ROA not after: Tue 20 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:87:1d:30:5e:18:f1:40:62:f7:4c:52:e1:77:df:c6:77:e5:59:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 15 15:13:27 2025 GMT
Not After : May 20 23:59:59 2025 GMT
Subject: serialNumber=c518cda5b80be69fa006c31985b5cfe0912346162dd5371b4d1ae331df11a99a, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:1d:60:c0:eb:16:50:6f:67:e8:78:29:f5:
1f:98:b0:24:d7:4f:48:0f:4b:24:e9:bf:70:37:85:
a6:77:a9:3a:c2:ed:41:56:ce:dc:32:36:e8:b1:df:
78:70:a4:6f:90:3d:5f:fd:21:da:59:eb:7d:49:51:
ff:de:1e:bf:1a:82:0f:31:27:51:c7:b8:f7:4b:9a:
ec:47:5e:02:ea:35:20:d3:9e:2c:90:f4:3f:9b:e8:
63:c2:a8:26:81:56:e8:c2:58:be:76:bb:f3:73:5f:
fc:96:73:21:43:6b:15:8c:1c:fe:1b:27:a7:3e:4b:
26:77:22:63:7b:fd:42:05:1f:15:e7:54:c4:49:9d:
32:28:fa:b0:9b:d0:99:ef:3d:90:69:d3:1d:c3:de:
1f:5c:92:0c:eb:56:04:5e:d4:8e:25:20:ee:59:21:
d3:ed:e8:11:85:76:82:92:64:6d:d7:71:4c:32:fb:
64:6b:d8:e1:01:24:b8:9a:6c:35:21:59:0c:d3:7f:
cf:6d:65:69:4b:92:54:3f:ba:c6:78:d4:85:98:0e:
2d:14:5d:2c:d1:82:b7:11:fe:9c:c3:7d:e7:a9:ec:
ca:7d:08:ef:7e:73:cb:c1:b4:06:47:e0:a4:8a:c3:
b8:d4:8b:ab:a0:01:9d:b2:38:cf:0e:2f:0c:d6:7f:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:50:A2:56:8A:DE:B6:A1:28:F9:1E:89:8A:EF:2C:67:20:56:6B:A8
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e3541454-d00c-43b8-89f6-bdce2af6959f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a7:50:51:6a:c2:d3:8d:fa:9b:2e:81:0c:ae:dd:de:29:d6:
90:0a:f9:05:4b:67:93:94:72:9d:91:94:ae:f1:43:46:94:0c:
4c:67:3c:03:f3:7e:a2:34:2a:1e:24:ce:3a:6a:c4:0f:d3:9e:
67:6c:a5:2a:f3:36:07:ff:74:05:98:9e:48:5d:43:c2:73:40:
3d:ec:10:7b:ea:43:fd:13:4c:bf:55:28:cc:aa:5a:ae:a8:68:
2c:e9:7c:44:b0:24:e9:c3:81:7f:ce:d1:5c:1b:93:8f:6a:46:
84:d0:c0:b0:ad:1e:59:53:16:53:89:2f:3d:88:b2:e3:c3:b4:
5b:85:f6:cf:f0:88:2f:52:b0:93:b4:73:2e:9e:38:44:86:fc:
4f:61:30:20:0d:b7:ef:b3:95:3c:53:a2:20:31:56:28:81:b6:
60:ca:0a:da:8d:89:40:b2:f4:48:8a:63:24:ad:d1:4a:46:ac:
5a:ee:73:5c:7b:89:e4:f6:01:c1:ca:2d:7d:8c:4c:48:7e:10:
79:93:43:f9:d9:6d:be:4d:34:57:05:30:dc:d0:15:ae:74:d7:
01:c5:d7:21:45:c9:78:5b:eb:80:e7:b8:86:85:a4:68:5c:88:
f3:16:a6:e4:e8:ec:d4:e2:09:53:12:be:23:5b:41:85:dd:e1:
54:13:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:18:57 2025 by rpki-client on console.sobornost.net